News for hackers. Stuff that matters.

anonbanana

Re:1-Click GitHub Token Stealing via a VSCode Bug on Wednesday June 03, 2026 @01:27AM (#48380247)
That makes sense but doesn't excuse the behavior. Just because there is poor communication within Microsoft doesn't make it okay to silently patch a vulnerability. Also, looking at the timeline on OP's post from 2023 it seems they patched it and closed the bug on the same day which is a little sus .